OpenID Foundation Issues Warning Over Sign In with Apple System Security and privacy

[silversurfer]

OpenID Foundation, the organization behind the universal sign-in platform called OpenID Connect, has released a public letter to Apple, calling for the company to make a series of changes to its Sign In with Apple system.
 
The reason, the group says, is that the current platform “exposes users to greater security and privacy risks” and, at the same time, reduces the number of places where this feature can be used.
 
OpenID Foundation is a group backed by several industry giants, including Google and Microsoft. Apple isn’t yet a member of the non-profit organization, but in the letter, the Cupertino-based tech firm is invited to join the effort and work together with the other companies on improving the universal sign-in platform.
 
“The current set of differences between OpenID Connect and Sign In with Apple reduces the places where users can use Sign In with Apple and exposes them to greater security and privacy risks. It also places an unnecessary burden on developers of both OpenID Connect and Sign In with Apple. By closing the current gaps, Apple would be interoperable with widely-available OpenID Connect Relying Party software,” the letter reads.

Apple hasn’t offered a response to OpenID Foundation’s letter, but given the message includes a warning of privacy and security risks, the firm should at least discuss the mentioned issues.

SOURCE: https://news.softpedia.com/news/openid-f...6577.shtml